request must meet certain requirements. vSphere Replication can only import and use ę and private keys from a ę in the PKCS#12 format. Sometimes these ę have a .pfx extension. n The ę must be issued for the same server name as the value in the VRM Host Ĵ in the VAMI. ³ Ĵ the ę subject name accordingly is Ĝ ǰ if you put a host name in the VRM Host Ĵ ǯ If any of the ę Subject Alternative Name ę of the ę matches the VRM Host Ĵ ǰ this will work as well. n vSphere Replication checks the issue and expiration dates of the ę against the current date, to ensure that the ę has not expired. n If you use your own ę authority, for example one that you create and manage with the OpenSSL tools, you must add the fully ę domain name or IP address to the OpenSSL ę ę ǯ n If the fully ę domain name of the appliance is VR1.example.com , add subjectAltName = DNS: VR1.example.com to the OpenSSL ę ę ǯ n If you use the IP address of the appliance, add subjectAltName = IP: vr-appliance-ip-address to the OpenSSL ę ę ǯ n vSphere Replication requires a trust chain to a well-known root ę authority. vSphere Replication trusts all the ę authorities that the Java Virtual Machine trusts. Also, you can manually import additional trusted CA ę in /opt/vmware/hms/security/hms- truststore.jks on the vSphere Replication appliance. n vSphere Replication accepts MD5 and SHA1 signatures, but VMware recommends that you use SHA256 signatures. VMware vSphere Replication Administration 54 VMware, Inc.
n vSphere Replication does not accept RSA or DSA ę with 512-bit keys. vSphere Replication requires at least 1024-bit keys. VMware recommends using 2048-bit public keys. vSphere Replication shows a warning if you use a 1024-bit key. Change the Password of the vSphere Replication Appliance You set the password of the vSphere Replication appliance when you deploy the appliance. You can change the password after installation by using the virtual appliance management interface (VAMI). Prerequisites n Verify that the vSphere Replication appliance is powered on. n Verify that you have administrator privileges to ę the vSphere Replication appliance. n Update the vCenter Server to 6.0. Procedure 1 Use a supported browser to log in to the vSphere Replication VAMI. The URL for the VAMI is Ĵ ǱȦȦ vr-appliance-address :5480. 2 Type the root user name and password for the appliance. You ę the root password during the OVF deployment of the vSphere Replication appliance. 3 Click the VR tab and click Security . 4 Type the current password in the Current Password text box. 5 Type the new password in the New Password and the ² ę New Password text boxes. The password must be a minimum of eight characters. vSphere Replication does not support blank passwords. 6 Click Apply to change the password.
You've reached the end of your free preview.
Want to read all 112 pages?
- Summer '19